World Fuel Services Corporation, its subsidiaries and affiliates (collectively, “WFS”) are committed to safeguarding the personal information of our customers, business partners, and employees. The following Data Protection and Privacy Principles (the “Privacy Principles”) outline how WFS may collect, use, share, transmit, maintain, and store (collectively, “process”) information that relates to an identified or identifiable individual (“personal information”), and the choices that may be available to you regarding your personal information. Under these Privacy Principles, “you” and “your” means any individual customer, business partner, or employee of WFS and any other individual whose personal information we process, and “we”, “us”, and “our” refer to WFS.

Please read the following carefully to understand our views and practices regarding your personal information and how we may treat it. For more information, or if you have any questions and/or are eligible to submit a subject access request, please reach out to us using the contact details found below, or visit our WFS Data Privacy Center.

Collection, Notice, and Processing of Personal Information

We will only collect personal information as appropriate and using only fair and lawful methods. We will process your personal information fairly and for purposes permitted by you and/or as permitted by applicable law. If requested, and/or where is not clear from the WFS product or service that you utilize or from your relationship with us, we may inform you about how your personal information is processed and the rights and remedies you have under our Privacy Principles. In addition, where permitted under applicable law you may object to certain types of processing. The WFS business(es) with which you transact provide notifications regarding the collection and processing of personal data and such notices may be found in the WFS Data Privacy Center.

Data Security and Confidentiality

We will keep your personal information confidential and limit access to your personal information to those who specifically need it to conduct their business activities, except as otherwise permitted by applicable law. We have implemented industry standard measures to secure your personal information from accidental loss and from unauthorized access, use, alteration and disclosure. We require industry standard data security measures from those third parties who are authorized by us to process your personal information on our behalf.

Choices Regarding How We May Use and/or Disclose Personal Information

We strive to provide you with choices regarding the personal information you provide to us, including giving you the option of having your personal information included or removed from lists used by WFS for marketing purposes, as may be required by applicable law. Each of our businesses may continue to send its customers information about the products or services that they receive from that business.

Accessing and Maintaining Personal Information

Depending on your country or residence and/or citizenship, under applicable laws such as the EU General Data Protection Regulation (“GDPR”), you may also have the right to demand access to, review and change, and request deletion of the personal information that you have provided to us. Please note, however, that we may not always be able to accommodate your request to change or delete information if we believe doing so would cause the information to be incorrect, if we have a legitimate business purpose to retain that information, and/or if doing so might violate other legal obligations.

Transferring Personal Information

As a global group of companies, we may transfer the Personal Information we collect about you to countries other than the country in which the information was originally collected. When we transfer your information to other countries, we will take appropriate steps to protect that information. Where it is not clear from the WFS product or service or from your relationship with us, we will tell you if your personal information may be transferred outside of your country. We will ensure any transfers are conducted in accordance with applicable law.

If you are located in a country subject to the GDPR, please note that we will comply with applicable legal requirements and have adequate measures in place to provide protection for the international transfer of Personal Information. These measures include, among others, contractual obligations for recipients to handle and protect the personal information in accordance with standard contractual clauses developed by the European Commission.

Accountability

WFS takes its data privacy obligations very seriously, and its employees may only process your personal information in accordance with these Privacy Principles, for which we conduct training and review compliance. Employees who violate these Privacy Principles may be subject to disciplinary action, up to and including termination.